[Git][security-tracker-team/security-tracker][master] update notes (closing commits) on libmongocrypt CVEs

[Roberto C. Sánchez (@roberto)]

Roberto C. Sánchez pushed to branch master at Debian Security Tracker / security-tracker


Commits:
566e45c5 by Roberto C. Sánchez at 2026-10-29T19:39:24-04:00
update notes (closing commits) on libmongocrypt CVEs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -82700,6 +82700,7 @@ CVE-2026-84971 (Improper handling of an unexpected value size in the decryption
 	[trixie] - libmongocrypt <no-dsa> (Minor issue)
 	[bookworm] - libmongocrypt <postponed> (Minor issue)
 	NOTE: https://jira.mongodb.org/browse/MONGOCRYPT-971
+	NOTE: Fixed by: https://github.com/mongodb/libmongocrypt/commit/02a0bb0178270c729a0a11f29b6f637870b287ea (1.20.4)
 CVE-2026-84970 (A numeric truncation weakness exists in the JSON parsing component of  ...)
 	- mongo-cxx-driver 4.5.2-1
 	NOTE: https://jira.mongodb.org/browse/CXX-3547
@@ -82742,6 +82743,7 @@ CVE-2026-84962 (An unauthorized user with key vault write access may cause an au
 	[trixie] - libmongocrypt <no-dsa> (Minor issue)
 	[bookworm] - libmongocrypt <postponed> (Minor issue)
 	NOTE: https://jira.mongodb.org/browse/MONGOCRYPT-960
+	NOTE: Fixed by: https://github.com/mongodb/libmongocrypt/commit/53b74103284cbdf035d97f177a796093c95525f5 (1.20.2)
 CVE-2026-84888 (A weakness has been identified in RightNow-AI OpenFang up to 0.6.9. Th ...)
 	NOT-FOR-US: RightNow-AI OpenFang
 CVE-2026-84887 (A vulnerability was identified in simular-ai Agent-S up to 0.3.2. Affe ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/566e45c5c214fe6e5e4703fb0636da267f83c00a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/566e45c5c214fe6e5e4703fb0636da267f83c00a
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261029/07c40110/attachment.htm>